Lucene search
+L

178194 matches found

Kitploit
Kitploit
added 2026/09/21 5:32 a.m.13 views

InfraGuard

Red team infrastructure tracker and C2 redirector -- a modern alternative to RedWarden. InfraGuard sits between the internet and your C2 teamserver, validating every inbound request against your malleable C2 profile and blocking anything that doesn't conform. Scanners, bots, and blue team probes...

5.8AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/21 5:21 a.m.9 views

PurpleKeep

Description With the rapidly increasing variety of attack techniques and a simultaneous rise in the number of detection rules offered by EDRs Endpoint Detection and Response and custom-created ones, the need for constant functional testing of detection rules has become evident. However, manually...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 5:13 a.m.16 views

mcp-security-checklist

🔐 MCP Security Checklist A practical, community-maintained security checklist for teams building and deploying Model Context Protocol MCP servers and AI agent infrastructure. Why This Exists MCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/21 5:02 a.m.48 views

pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 4:54 a.m.9 views

day01-sessionreaper-lab

Day 1 — SessionReaper-style Vulnerable Lab Educational This is a tiny lab that simulates the core idea reported for CVE-2025-54236 “SessionReaper”: improper validation of nested JSON leading to dangerous code paths. This is not Magento/Adobe Commerce; it's a minimal educational replica to practic...

9.1CVSS8.7AI score0.94532EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/21 4:38 a.m.9 views

CVE-2024-3273-D-Link-Remote-Code-Execution-RCE

CVE-2024-3273 - D-Link Remote Code Execution RCE Exploit Description This repository contains an exploit for CVE-2024-3273 , a critical vulnerability found in specific D-Link devices that allows for Remote Code Execution RCE. The vulnerability arises from improper input validation in the...

9.8CVSS8.3AI score0.99997EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/21 4:33 a.m.7 views

polaris

Polaris is an open source policy engine for Kubernetes Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/21 4:30 a.m.11 views

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilit...

6.5AI score
SaveExploits0References19
Kitploit
Kitploit
added 2026/09/21 3:49 a.m.14 views

bug-reaper

BugReaper Structured web2 bug bounty AI skill — 18 vulnerability classes, 4 bug bounty platforms, zero AI slop. Compatible with OpenClaw, Cursor, Claude Code, Antigravity, and Windsurf. BugReaper is an Agent Skill that turns any compatible AI agent into a disciplined web2 bug bounty hunter. It...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/21 3:42 a.m.14 views

CredsLeaker

CredsLeaker v4.x A big shoutout to @ApSecDev who took this project to the next level! Kudos! This script used to display a powershell credentials box asked the user for credentials. However, That was highly noticeable. Now it's time to utilize Windows Security popup! Features AD domain...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 3:38 a.m.10 views

CVE-2019-16172

CVE-2019-16172 The CVE-2019-16172 Scanner is designed to check LimeSurvey instances for the stored XSS vulnerability. CVE Descriptions CVE-2019-16172 Description: CVE-2019-16172 is a stored XSS vulnerability found in LimeSurvey versions prior to 3.17. The vulnerability arises due to improper...

5.4CVSS6.4AI score0.04611EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/21 3:37 a.m.10 views

CVE-2024-56331

CVE-2024-56331 Uptime-Kuma : Local File Inclusion LFI via Improper URL Handling in Real-Browser monitor Summary An Improper URL Handling Vulnerability allows an attacker to access sensitive local files on the server by exploiting the file:/// protocol. This vulnerability is triggered via the...

6.8CVSS6AI score0.01829EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 3:34 a.m.164 views

jwt_tool

The JSON Web Token Toolkit v2 jwttool.py is a toolkit for validating, forging, scanning and tampering JWTs JSON Web Tokens. Its functionality includes: Checking the validity of a token Testing for known exploits: CVE-2015-2951 The alg=none signature-bypass vulnerability CVE-2016-10555 The RS/HS25...

9.8CVSS6.8AI score0.60336EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/21 3:28 a.m.13 views

suricata-vedas

Suricata VEDAS VEDAS-Driven Autonomous Generation of Suricata Rules for CVEs Purpose This repository serves as an open, collaborative validation space for Suricata rules generated autonomously by ARPSyndicate's Vulnerability & Exploit Data Aggregation System VEDAS. While such AI enables rapid,...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 3:01 a.m.11 views

WHOREPRESS

Wordpress login checker Install root@kitploit: npm install --global whorepress Usage make sure you have a list with format url:username:pass root@kitploit: whorepress list.txt Arguments list Arguments| Description ---|--- --admin-only| check only for admin priviledge --debug| debug error output...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 2:57 a.m.176 views

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation root@kitploit: installrustbuster echo "Installing...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 2:44 a.m.11 views

security-audit-skill

security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 2:41 a.m.11 views

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

7.8CVSS7.6AI score0.0146EPSS
SaveExploits17References1
Kitploit
Kitploit
added 2026/09/21 2:37 a.m.13 views

EuConform

EuConform 🇪🇺 Open-Source Evidence Toolkit For AI Compliance Open evidence format • Local bias evaluation • Schema validation • CycloneDX interoperability Offline-first • Privacy-preserving • Reusable artifacts • WCAG 2.2 AA accessible EuConform defines an open evidence format for AI compliance and...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/21 2:35 a.m.8 views

CVE-2024-27564

CVE-2024-27564 Description: A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This SSRF vulnerability can be exploited without authentication, making it particularly dangerous. The vulnerable code is in the...

6.5CVSS7.8AI score0.40637EPSS
SaveExploits2
Rows per page
Query Builder